It seems you'd need to call setregid(getgid(), getgid()) to fully drop privileges. When using setgid() the set-group-id is not set.
-- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
